search

iceman1001 / proxmark3

[Deprecated] Iceman Fork, the most totally wicked fork around if you are into proxmark3
http://www.icedev.se/pm3.aspx
GNU General Public License v2.0
465 stars 116 forks source link

How to simulate Mifare Ultralight EV1? #118

Closed BlackPaaanda closed 7 years ago

BlackPaaanda commented 7 years ago

Hi, iceman

I've dumped the data of a ultralight EV1 (48 bytes) tag (hopefully it is the data) using "hf mfu dump" and i got 32*7 characters table by using "pm3_mfd2eml.py" function. However, when i try to use "hf mfu eload" to load this file to pm3's emulator memory, it said: ............File reading error. Did i do something wrong or how actually should i simulate the ultralight EV1 tag?

iceman1001 commented 7 years ago

I know, its a known quirk
The dump file needs to be 255 blocks... just add the extra needed empty blocks and it should Eload without problems.

On 2 Aug 2017, at 15:25, Panda notifications@github.com wrote:

Hi, iceman

I've dumped the data of a ultralight EV1 (48 bytes) tag (hopefully it is the data) using "hf mfu dump" and i got 32*7 characters table by using "pm3_mfd2eml.py" function. However, when i try to use "hf mfu eload" to load this file to pm3's emulator memory, it said: ............File reading error. Did i do something wrong or how actually should i simulate the ultralight EV1 tag?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.

BlackPaaanda commented 7 years ago

Does this means that the data table should be 32*255 with all extra blocks be empty?

BlackPaaanda commented 7 years ago

Hi iceman,

As i tried to modify the dump file, the proxmark3 can simulate the MF0UL11 tag. However, i checked the .eml data, found that the first 4 blocks are all 0. Number starts to change at block 4 and it matches the card finger prints. What does that mean?

iceman1001 commented 7 years ago

that has to do with the dump-file-format adds "special" data the first 48bytes. Afterwards comes the normal datablock. I'm unsure if the eload/simulation takes this in consideration. it should but I'ven't looked at it for a long time.

iceman1001 commented 7 years ago

close ?

BlackPaaanda commented 7 years ago

Thanks a lot iceman. You can close this

Iceman notifications@github.com于2017年8月9日 周三16:08写道：

close ?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/iceman1001/proxmark3/issues/118#issuecomment-321162094, or mute the thread https://github.com/notifications/unsubscribe-auth/AboTS3lSlYp_IEi1570VJsMH8ozDA-ILks5sWUz4gaJpZM4OrFnE .